| Version | Supported | Notes |
|---|---|---|
| thesis-v26.x | ✅ | Current active release line |
| < thesis-v26 | ❌ | Archived / experimental builds |
SmartHome_Server is architected around mutual TLS (mTLS) cryptographic isolation for private home automation:
- Mutual TLS (mTLS) Enforcement: MQTT broker traffic requires valid X.509 client and server certificates. Cleartext TCP MQTT connections are disabled by default.
- Credential & Secret Protection: Sensitive credentials, broker passwords, Wi-Fi keys, and private keys (
*.key,secrets.yaml) must never be committed to source control. Template files (.example) are provided for configuration. - Network Boundary Isolation: Microcontroller nodes (ESP32/ESP8266) communicate exclusively over isolated IoT VLANs or local subnetworks without requiring inbound public port forwarding.
If you discover a security vulnerability, certificate handling issue, or network leak:
- Do NOT report security issues via public GitHub issues.
- Report privately via GitHub Security Advisories or contact the maintainer directly at
yuanweize@users.noreply.github.com. - Provide details on the affected component (Broker, ESPHome firmware, or Home Assistant integration) and reproduction steps.
- I aim to acknowledge valid security reports as soon as practical, investigate the root cause, and coordinate a patch.